Tektoncd

9 CVEs across 2 Tektoncd products. Browse Tektoncd vulnerabilities, severities, and proof-of-concept exploits.

Tektoncd products with known CVEs

ProductCVEs
Pipeline8
Pipelines-As-Code1
Tektoncd CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-54167High8.22026-09-15Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8, 0.39.6, 0.42.1, and 0.48.0, the GitHu…
CVE-2026-40938High7.52026-04-21Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.2, 1.3.4, 1.6.2…
CVE-2026-40924Medium6.52026-04-21Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.2, 1.3.4, 1.6.2…
CVE-2026-40923Medium5.42026-04-21Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.2, 1.3.4, 1.6.2…
CVE-2026-40161High7.72026-04-21Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.2, 1.3.4, 1.6.2…
CVE-2026-25542Medium6.52026-04-21Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 0.43.0 and prior to versions 1.0.2, 1.3.4, 1.6.2…
CVE-2026-33211Critical9.62026-03-24Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.1, 1.3.3, 1.6.1…
CVE-2026-33022Medium6.52026-03-20Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Versions 0.60.0 through 1.0.0, 1.1.0 through 1.3.2, 1.4.0 through 1…
CVE-2023-37264Low3.72023-07-07Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 0.35.0, pipelines do not validate child UIDs, wh…